Attached. Copy in-line:
TC Name: Cyber Threat Intelligence / CTI
Subcommittee Name: CTI Standards Adoption, Engagement and Outreach
Statement of Purpose:
· Landscape
Identification, Discovery, Documentation, Support to- and Communication of the landscape of current- and prospective users of CTI’s Standards CyBox, STIX and TAXII. Including but not limited to:
o Information Sharing and Analysis Organizations (ISAOs), Information Sharing & Analysis Centers (ISACs), Cyber Intelligence Sharing Center (CISCs), National Detection Networks and other geo-graphical, sector- and community specific cyber threat intelligence and incident related exchange communities.
o Technology vendors of technologies powering Security Operations, Incident Response and Threat Management.
o Service providers in Security Operations, Incident Response and Threat Management.
o Cyber Threat Intelligence content suppliers.
o Civil Regional, National or Global Alliances able to receive and/or share Cyber Threat Intelligence information
· Trust
Build trust among decision makers and technical specialists in favor of adopting CTI Standards CyBox, STIX and TAXII as part of their technology enablement toolset. Including but not limited to activities around community motivation and enablement for public speaking, publications, closed-door evangelizing and easily accessible information.
· Enablement
Identification of key growth factors in adoption to be able to bridge the gap in information needs, tooling, features in the standards and other community enablement.
· Certification
Working towards community agreed and stable certification framework to enable the landscape to measure compatibility and feature implementation through a trusted (group of) third party/parties. Eventual goal being predictable compatibility.
· Public relations
If the larger TC finds it helpful, routing and facilitation of press requests and other public relations matters.
Deliverables:
· Landscape
o Listed and/or visual representations of the landscape
o Hall of frame / Hall of shame
o Compatibility and certification overviews
o Guides, usage patterns and other enablement required for further adoption
o All available to the community and the public through the OASIS portal and/or other STIX, TAXII and CyBox online portals
· Trust
o Public speaking engagements
o Papers
o Marketing / PR
o Documentation
· Enablement
o Usage patterns
o CTI TC functional and non-functional requirements
o Surrounding tooling (requirements)
o Documentation
· Certification
o Certification framework
o Certification partners
Chairs: Patrick Maroney, Joep Gommers